Re: [Openstack] Windows Image 2008 in OpenStack

2013-05-27 Thread Jason Ford
Directions are here.. http://docs.openstack.org/trunk/openstack-compute/admin/content/creating-a-windows-image.html Enjoy. Jason - Jason Ford jf...@blackmesh.com<mailto:jf...@blackmesh.com> Http://www.blackmesh.com 888.473.0854 x710 On May 27, 2013, at 1

Re: [Openstack] [OpenStack Marketing] New code name for networks

2013-05-13 Thread Jason Smith
Hello Stefano, Thank you for the information. I apologize for cross-posting. I'll make sure and stay away from that in the future. Thanks, -js -- Typo's courtesy of Apple -- On May 12, 2013, at 11:58 PM, "Stefano Maffulli" wrote: > Hi Jason, > > thank you fo

Re: [Openstack] [OpenStack Marketing] New code name for networks

2013-05-12 Thread Jason Smith
Excellent! I was not aware of that discussion. Thanks, -js On May 12, 2013, at 8:14 AM, Mark McLoughlin wrote: > On Sat, 2013-05-11 at 19:50 +0000, Jason Smith wrote: >> Hello, >> I understand why we had to give up Quantum code name but rather than >> just refer to i

[Openstack] New code name for networks

2013-05-11 Thread Jason Smith
Hello, I understand why we had to give up Quantum code name but rather than just refer to it as networking let's come up with a new code name! Thoughts? Thanks, -js ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launch

Re: [Openstack] Grizzly official packages

2013-04-06 Thread Jason Ford
he RC packages? If they are indeed not out yet, when will they be? Thanks! jason - Original Message - From: "Daviey Walker" To: "Filipe Manco" Cc: openstack@lists.launchpad.net Sent: Saturday, April 6, 2013 4:16:42 PM Subject: Re: [Openstack] Grizzly official packages

Re: [Openstack] quantum: two ips one vif

2012-10-23 Thread Jason Kölker
On Tue, 2012-10-23 at 15:14 -0700, Dan Wendlandt wrote: > can you post your libvirt xml for the VM? It maybe well be libvirt > filtering if you are using the OVS Hybrid vif driver: > > for example, a VM would have xml like: > > > > > > > > > I'm

Re: [Openstack] quantum: two ips one vif

2012-10-23 Thread Jason
Only one listed. What is more odd is that I am not seeing arps being returned so this issue seems to be at layer 2. Any other ideas? Jason On Oct 23, 2012, at 5:46 PM, Aaron Rosen wrote: > Do you have two default gateways in your instance when you type route -n ? > > Aaron > &

Re: [Openstack] quantum: two ips one vif

2012-10-23 Thread Jason Ford
somewhere or is there something more I should look for? Does it work for anyone else or did I hit a bug? jason - Original Message - From: "Dan Wendlandt" To: "Jason Ford" Cc: openstack@lists.launchpad.net Sent: Tuesday, October 23, 2012 12:55:42 AM Subject: Re: [Ope

Re: [Openstack] quantum: two ips one vif

2012-10-23 Thread Jason
Dan, Is there a way to do this on an instance already provisioned and maybe just reboot it to pick up the new ip? Thanks for the quick reply. Jason On Oct 23, 2012, at 12:55 AM, Dan Wendlandt wrote: > by default, quantum will give a port one IP address from any v4 subnet > associate

[Openstack] quantum: two ips one vif

2012-10-22 Thread Jason Ford
hen I create another subnet in quantum, that works. How do I assign an ip address from the new subnet to the same openvswitch port via quantum? jason ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubs

Re: [Openstack] Use of MAC addresses in Openstack VMs

2012-10-22 Thread Jason Kölker
On Tue, 2012-10-23 at 08:43 +0800, Shake Chen wrote: > On Mon, Oct 22, 2012 at 8:08 PM, Gary Kotton wrote: > > # Base MAC address. The first 3 octets will remain unchanged. If the > > # 4h octet is not 00, it will also used. The others will be > > # randomly generated. > > # 3 octet > > # base_mac

Re: [Openstack] Openstack summit hotel

2012-09-17 Thread Jason Ford
Lauren, Thank you for getting this setup. I can confirm that there are some rooms free as I just took three :) See you all in San Diego. Regards, jason Jason Ford jf...@blackmesh.com<mailto:jf...@blackmesh.com> BlackMesh Managed Hostin

[Openstack] Private instances can't access Internet

2012-09-10 Thread Jason Cooper
, and many thanks in advance. - Jason ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Rouault, Jason (Cloud Services)
This was a concern for HP as well. This is one of the reasons we were happy to see that signed tokens are currently a deployment option. So, you can continue to use the unsigned model until such a time that revocation can be put into place for the token signing model. Jason From

Re: [Openstack] Identity API v3 - Why allow multi-tenant users?

2012-07-17 Thread Rouault, Jason (Cloud Services)
One benefit is the user does not need to have multiple sets of credentials to interact with multiple projects. Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Adam Young Sent: Tuesday

Re: [Openstack] Don't bypass code-review.

2012-07-10 Thread Jason Kölker
On Tue, 2012-07-10 at 15:32 -0400, Eric Windisch wrote: > > > > Jenkins was failing to merge *ANY* code reviews for openstack-common. > > The root of the dependency tree of your patch sets is insufficient to > > make the test suite pass. The set of patches needed to go in in one > > commit. I was

Re: [Openstack] Don't bypass code-review.

2012-07-10 Thread Jason Kölker
On Tue, 2012-07-10 at 13:52 -0400, Eric Windisch wrote: > I've had code reviews sitting out for over a week, looking to fix > issues with the ZeroMQ driver in openstack-common. I'd love to get it > fixed, and nudged a couple of people to get the reviews in, but > figured that it would get in eventu

Re: [Openstack] Openstack-Common ZeroMQ

2012-07-10 Thread Jason Kölker
On Tue, 2012-07-10 at 13:36 -0400, Eric Windisch wrote: > > > > The bigger issue is getting people to do the reviews... > > > > Here is the link for those that want to help: > https://review.openstack.org/#/q/status:open+project:openstack/openstack-common+branch:master+topic:bug/1021459,n,z Co

[Openstack] Openstack-Common ZeroMQ

2012-07-10 Thread Jason Kölker
The zeromq tests are failing in jenkins. I created bug https://bugs.launchpad.net/openstack-common/+bug/1023060 for this. Anyone with an interest in ZeroMQ support, please help to resolve this bug. Happy Hacking! 7-11 ___ Mailing list: https://launchp

Re: [Openstack] Passing parameters from Quantum manager to Nova compute

2012-06-06 Thread Jason Kölker
On Wed, 2012-06-06 at 21:35 +0300, Rami Cohen wrote: > Hi, > While Quantum manager may communicate with compute nodes using a quantum > agent, in some cases when Quantum is integrated with Nova, the agent may > not be needed (while it can be used for enhanced services). In this cases, > when the Qu

Re: [Openstack] centos 6 images

2012-05-25 Thread Jason Ford
Joshua, First off, thanks for getting something together. I think you have a bug in your spec file at line 1. After that I got it to build after renaming some directories. I am in the process of testing this out now in a devstack install. I will give you feedback when I get it. jason

Re: [Openstack] centos 6 images

2012-05-22 Thread Jason Ford
: - hostname set to instance name - disk space resize to flavor size - ssh-key pull - report a random password for root user (or default user) if this is possible Thanks for looking at this. jason - Original Message - From: "Scott Moser" To: "Pádraig Brady" Cc: "Fedora

Re: [Openstack] centos 6 images

2012-05-22 Thread Jason Ford
Joshua, Do you have some basic instructions on how to push this into an image and configure it? Any information about what you have here would be great! jason - Original Message - From: "Joshua Harlow" To: "Jason" , "Pádraig Brady" Cc: "Fedora Clou

Re: [Openstack] centos 6 images

2012-05-22 Thread Jason
I will give these a shot later today and reply with feedback. Thanks for looking into this! Jason On May 22, 2012, at 11:44 AM, Pádraig Brady wrote: > On 05/22/2012 03:39 PM, Andy Grimm wrote: >> On Tue, May 22, 2012 at 9:38 AM, Pádraig Brady wrote: >>> On 05/22/2012 04

[Openstack] centos 6 images

2012-05-22 Thread Jason Ford
anyone have any howtos or suggestions on how to get this done? Is there cloud-init for centos just like ubuntu? I would also be interested in how to do this with debian as well. Thanks! jason ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] Swift: tempURL

2012-05-15 Thread Rouault, Jason (Cloud Services)
There is a blueprint for this work in Keystone Folsom From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Suchi Sinha (susinha) Sent: Monday, May 14, 2012 11:29 AM To: openstack@lists.launchpad.net Sub

Re: [Openstack] [Swift][Keystone] Swift Quotas

2012-05-04 Thread Rouault, Jason (Cloud Services)
IMHO, if it is a quota related to a tenant or user, then managing it in Keystone makes sense. Jason -Original Message- From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Eoghan Glynn Sent

Re: [Openstack] running HA cluster of guests within openstack

2012-04-13 Thread Jason Kölker
On Fri, 2012-04-13 at 12:31 +0300, ikke wrote: > 1. Private networks between guests > -> Doable now using Quantum > 1.1. Defining VLANs visible to guest machines to separate clusters > internal traffic, >VLAN tags should not be stripped by host (QinQ) VLANs and Quantum private networks

Re: [Openstack] Melange Unittests

2012-04-06 Thread Jason Kölker
On Fri, 2012-04-06 at 13:11 +, Vaze, Mandar wrote: > I tried to run ./run_tests.sh (without virtualenv) I kept on getting error > related to "unable to find config file" > I ran the tests from /opt/stack/mélange > Same errors when I run "python run_tests.py" > /opt/stack/mélange/etc/mélange/mé

Re: [Openstack] Melange Unittests

2012-04-05 Thread Jason Kölker
On Fri, 2012-04-06 at 00:04 +, Brian Lamar wrote: > Can anyone enlighten me as to why the gate-melange-unittests-python26 job is > only running a single test? The first time it ran it correctly found all 500+ > tests but now it seems to be just running one. :( > > This is happening locally f

Re: [Openstack] melange_ipam : get_tenant_id_by_net_id - possible bug (and fix)

2012-03-28 Thread Jason Kölker
Hi Mandar, Thanks for taking the time to look into Melange! Currently Nova + Quantum + Melange is in a huge state of development flux. The current code gets us enough to play with some features and be backwards compatible with all the features in the "legacy" network managers. In the Folsom develo

Re: [Openstack] Essex keystone with remote glance endpoint

2012-03-20 Thread Jason Hedden
On Mar 19, 2012, at 12:13 PM, Jason Hedden wrote: > Glance host (192.168.131.142): > glance # lsb_release -d; uname -a; dpkg -l | egrep "glance|keystone" > Description: Ubuntu precise (development branch) > Linux ubuntu 3.2.0-17-generic #27-Ubuntu SMP Fri Feb 24 15:37:36 UTC

Re: [Openstack] Essex keystone with remote glance endpoint

2012-03-19 Thread Jason Hedden
tp://paste.openstack.org/show/11078/ Glance CLI with admin credentials: glance # glance -I adminUser -K ... -S keystone -N http://192.168.131.141:5000/v2.0 index Failed to show index. Got error: Response from Keystone does not contain a Glance endpoint. curl with admin user: http://paste.openstac

Re: [Openstack] Essex keystone with remote glance endpoint

2012-03-19 Thread Jason Hedden
On Mar 19, 2012, at 12:58 PM, Jay Pipes wrote: > On 03/19/2012 01:13 PM, Jason Hedden wrote: >> When following the documentation at >> https://review.openstack.org/#change,5190 I'm having trouble getting Glance >> to authenticate via Keystone. I have this

[Openstack] Essex keystone with remote glance endpoint

2012-03-19 Thread Jason Hedden
one.middleware.auth_token:filter_factory service_protocol = http service_host = 192.168.131.141 service_port = 5000 auth_host = 192.168.131.141 auth_port = 35357 auth_protocol = http auth_uri = http://192.168.131.141:5000/ admin_tenant_name = service admin_user

Re: [Openstack] How many Role name can be used in Keystone and what is the use of each role?

2012-03-16 Thread Rouault, Jason (Cloud Services)
Keystone does not have the concept of least privilege for such operations. The notion of roles with capabilities in Keystone is something that maybe can be addressed in Folsom Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp

Re: [Openstack] How could I delete errored volumes?

2012-03-14 Thread Jason Hedden
) +1 to the feature request. In the mean time try using nova-manage to delete these volumes. nova-manage volume delete 3 Jason ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad

Re: [Openstack] Keystone database (using latest devstack)

2012-03-09 Thread Jason Hedden
e it using cli (when it gets implemented) ? The data is stored in a python dictionary, inside of the metadata table. You will not be able to use SQL without an unwieldy wildcard search. IMO this seems overly complicated for a core function of the tool, and possibly the reason why l

Re: [Openstack] Keystone database (using latest devstack)

2012-03-08 Thread Jason Hedden
On Mar 8, 2012, at 6:12 PM, Andy Smith wrote: > > I came across this while trying to list the roles assigned to users, which I > still don't know how to do via the keystone client utility. Is this even > possible? > > Well, to clarify that statement a bit, roles exist on user-tenant pairs,

[Openstack] Keystone database (using latest devstack)

2012-03-08 Thread Jason Hedden
its job? You can view a snippet of the Keystone metadata table @ http://paste.openstack.org/show/7552/ I came across this while trying to list the roles assigned to users, which I still don't know how to do via the keystone client utility. Is this even possible? Jason H

Re: [Openstack] Interaction between nova and melange : ip fixed not found

2012-02-28 Thread Jason Kölker
On Tue, 2012-02-28 at 11:52 +0100, Jérôme Gallard wrote: > Hi all, > > I use the trunk version of Nova, Quantum (with the OVS plugin) and Melange. > I created networks, everything seems to be right. > > I have two questions : > - the first VM I boot takes always a wrong IP address (for instance >

Re: [Openstack] Keystone Use Cases and User Stores

2012-02-17 Thread Rouault, Jason (Cloud Services)
ble on the 28th but Guang can attend. Jason -Original Message- From: Joseph Heck [mailto:he...@mac.com] Sent: Friday, February 17, 2012 1:45 PM To: Rouault, Jason (Cloud Services) Cc: OpenStack Mailing List Subject: Re: [Openstack] Keystone Use Cases and User Stores Thanks Jason - Thats

Re: [Openstack] Keystone Use Cases and User Stores

2012-02-17 Thread Rouault, Jason (Cloud Services)
http://etherpad.openstack.org/keystone-domains -Original Message- From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Joseph Heck Sent: Friday, February 17, 2012 12:59 PM To: OpenStack Mailing Lis

Re: [Openstack] Bug launching instance in Essex packages on Precise - for nw, info in nw_info: too many values to unpack (network/manager.py)

2012-02-16 Thread Jason Kölker
On Thu, 2012-02-16 at 14:56 +, Kevin Jackson wrote: > Hi Jason, > This has worked - but introduced some further bugs. > > The instance spawns, but there is no float_ip information presented to > my client tools. &

Re: [Openstack] Remove Zones code - FFE

2012-02-14 Thread Jason Kölker
On Wed, 2012-02-15 at 00:00 +, Monsyne Dragon wrote: > On Feb 14, 2012, at 1:25 PM, Jay Pipes wrote: > > > -1 on shard b/c of database terminology. -1 on cluster because of HPC and > > database terminology. > > > > Zone was originally used because it is general -- referring to merely a > >

Re: [Openstack] Bug launching instance in Essex packages on Precise - for nw, info in nw_info: too many values to unpack (network/manager.py)

2012-02-14 Thread Jason Kölker
On Tue, 2012-02-14 at 20:43 +, Kevin Jackson wrote: > Dear cloud folk, > I raised https://bugs.launchpad.net/nova/+bug/928819 last week that's > not getting any love so was wondering if it was user error rather than > a bug (as its a show stopper for my setup that I previously didn't > have).

Re: [Openstack] [CHEF] Aligning Cookbook Efforts

2012-02-06 Thread Jason Cannavale
RCB deploy has a set of chef cookbooks we use for diablo all in one testing (minus swift) in addition to the work we have been doing with the crowbar team. Since we seem to be adding to the problem, we'd be happy to collaborate on the consolidation.. Jason On Feb 6, 2012, at 20:56, &

Re: [Openstack] openstack-common

2012-01-03 Thread Jason Kölker
On Tue, 2012-01-03 at 13:49 -0800, Monty Taylor wrote: > > It's more Jason's call, but I think we're basically asking you to hold > > off on that for a little while. We may decide to start a new repo. > > Oh - ok. My bad - I'll learn to read entire threads next time... > > Let let me know when i

Re: [Openstack] openstack-common

2012-01-03 Thread Jason Kölker
On Tue, 2012-01-03 at 21:38 +, Mark McLoughlin wrote: > > As a related note, I'm going to get the current repo moved in to gerrit > > today or tomorrow. > > It's more Jason's call, but I think we're basically asking you to hold > off on that for a little while. We may decide to start a new rep

Re: [Openstack] [nova-testing] Efforts for Essex

2011-11-30 Thread Jason Kölker
On Wed, 2011-11-30 at 11:07 -0800, Duncan McGreggor wrote: > * create nova/volume/tests > * move all scheduler-related tests (there are several) from > nova/tests into nova/volume/tests > * break out tests on a per-module basis (e.g., nova/volume/driver.py > would get the test module nova/volume

[Openstack] openstack.common module (was: Re: [RFC] Common config options module)

2011-11-29 Thread Jason Kölker
On Mon, 2011-11-28 at 20:57 +, Mark McLoughlin wrote: > Hi Jason, > > On Mon, 2011-11-28 at 10:24 -0600, Jason Kölker wrote: > > On Mon, 2011-11-28 at 08:06 -0800, Monty Taylor wrote: > > > > The idea is to unify option handling across projects with this new AP

Re: [Openstack] Database stuff

2011-11-29 Thread Jason Kölker
On Tue, 2011-11-29 at 16:20 +0100, Soren Hansen wrote: > > It seems I've talked myself into preferring option e). It's too much > work to do on my own, though, and it's going to be disruptive, so we > need to do it real soon. I think it'll be worth it, though. I agree. This will also make it eas

Re: [Openstack] [RFC] Common config options module

2011-11-28 Thread Jason Kölker
On Mon, 2011-11-28 at 08:06 -0800, Monty Taylor wrote: > > The idea is to unify option handling across projects with this new API. > > The module would eventually (soon?) live in openstack-common. > > Awesome. So - whaddya think about making openstack-common an > installable/consumable module? I

Re: [Openstack] Keystone & Swift: swiftauth tenant namespace collisions?

2011-11-21 Thread Rouault, Jason (Cloud Services)
Yes, I am aware of the new swift code for Keystone, but the question came from Judd who may be working off of Diablo-stable. -Original Message- From: John Dickinson [mailto:m...@not.mn] Sent: Sunday, November 20, 2011 8:59 AM To: Rouault, Jason (Cloud Services) Cc: Ziad Sawalha; Judd

Re: [Openstack] Keystone & Swift: swiftauth tenant namespace collisions?

2011-11-20 Thread Rouault, Jason (Cloud Services)
Ziad, I think the problem is that the 'swift' command scopes a user to an account(tenant) via the concatenation of account:username when providing credentials for a valid token. With Keystone and /v2.0 auth the tenantId (or tenantName) are passed in the body of the request.

Re: [Openstack] New git-review tool ready for people to try

2011-10-14 Thread Jason Kölker
On Thu, 2011-10-13 at 13:03 -0400, Monty Taylor wrote: > Amongst things git-review does: > > Rebases against the branch you're submitting to, rather than against > the place you cloned from > Allows you to skip rebasing if you want > Submit against a named branch > Explicitly set the topic

Re: [Openstack] dns issue?

2011-10-10 Thread Jason Kölker
On Mon, 2011-10-10 at 16:07 -0400, Sharif Islam wrote: > I am still stuck with this problem: my instances can ping only with ip > addresses. I deleted nova-network and created it again and then fired up > an instance. But still resolv.conf shows nameserver 10.0.1.1. I only > have one instance runni

Re: [Openstack] [Swift] [Keystone] Account migration

2011-09-13 Thread Rouault, Jason (Cloud Services)
If there is an existing swift customer with swift account 'foo' and nova project 'bar', there is no way to have them belong to the same Keystone tenant. I think that is the data migration issue. Jason -Original Message- From: openstack-bounces+jason.rouault=hp

[Openstack] Keystone / Swift integration

2011-09-08 Thread Rouault, Jason (Cloud Services)
Hello, can anyone comment on the status of the Keystone auth middle-ware component for Swift? When can we expect ACL support included? Will we have swauth comparable functionality by the time Diablo releases? Thanks, Jason smime.p7s Description: S/MIME cryptographic signature

Re: [Openstack] Nova: Admin API blueprints

2011-08-31 Thread Rouault, Jason (Cloud Services)
implemented? Thanks, Jason From: Glen Campbell [mailto:glen.campb...@rackspace.com] Sent: Wednesday, August 31, 2011 9:14 AM To: Rouault, Jason (Cloud Services); Vishvananda Ishaya; Nguyen, Liem Manh Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] Nova: Admin API blueprints Per

Re: [Openstack] Nova: Admin API blueprints

2011-08-30 Thread Rouault, Jason (Cloud Services)
Glen, How does one list the servers associated with a particular tenant? When I look at the GET /servers interface it only acts on the account of the 'caller'. Jason From: Glen Campbell [mailto:glen.campb...@rackspace.com] Sent: Tuesday, August 30, 2011 3:46 PM To: Roua

Re: [Openstack] Nova: Admin API blueprints

2011-08-30 Thread Rouault, Jason (Cloud Services)
And does that interface exist? Thanks, Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Vishvananda Ishaya Sent: Tuesday, August 30, 2011 12:31 PM To: Nguyen, Liem Manh Cc: openstack

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-07-21 Thread Rouault, Jason (Cloud Services)
across tenants for that user returned? Thanks, Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Behalf Of Ziad Sawalha Sent: Thursday, July 21, 2011 12:52 PM To: openstack@lists.launchpad.net Subject

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-15 Thread Rouault, Jason (Cloud Services)
In typical RBAC systems you specify the role you will be acting in when you gain access. This is the principal of least privilege. Jason From: Yuriy Taraday [mailto:yorik@gmail.com] Sent: Friday, July 15, 2011 11:27 AM To: Nguyen, Liem Manh Cc: openstack@lists.launchpad.net; Ziad

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-14 Thread Rouault, Jason (Cloud Services)
Yes, you always authenticate. If the user has no roles or group then would have no access rights to do anything. However, this would be an unusual case, as I would expect users to be automatically added a user group or developer role when their account was created. Jason From: Ziad

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-14 Thread Rouault, Jason (Cloud Services)
their role and group assignments within the context of TenantA. Jason From: Ziad Sawalha [mailto:ziad.sawa...@rackspace.com] Sent: Wednesday, July 13, 2011 10:35 PM To: Rouault, Jason (Cloud Services); Yuriy Taraday; openstack@lists.launchpad.net Subject: Re: [Openstack] Keystone tenant

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-13 Thread Rouault, Jason (Cloud Services)
cates specifying TenantA, or specifying no Tenant, this binds User1 into the context of TenantA. The headers would then be decorated with RoleX. Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp@lists.launchpad.net] On Beha

Re: [Openstack] nova-manage network modifications feedback request

2011-07-12 Thread Jason Kölker
the network_manager to/from nova should only occur over the rpc mechanism through a defined protocol. In this situation, I think each network_management implementation would have its own command set. > It would be great to coordinate these changes. Do you know when you expect > your branch ( &g

[Openstack] nova-manage network modifications feedback request

2011-07-07 Thread Jason Kölker
Hi all, I am work on being able to use ipv6 without the ipv4 requirement. To do this I am generalizing the concept of subnets so that any data link (bridge) can be assigned more than one subnet of which any number of them may be an ipv4 or an ipv6 subnet. I've seen some bugs popping up with the t

[Openstack] Keystone object model

2011-06-20 Thread Rouault, Jason (Cloud Services)
) How will Keystone groups map to the notion of group in Swift? 6) How will Keystone groups be used for Nova? Thanks, Jason smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: https://launchpad.net/~openstack Post to

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-06-16 Thread Rouault, Jason (Cloud Services)
See inline. Jason From: andi abes [mailto:andi.a...@gmail.com] Sent: Wednesday, June 15, 2011 5:04 PM To: Rouault, Jason (Cloud Services) Cc: Ziad Sawalha; openstack@lists.launchpad.net Subject: Re: [Openstack] OpenStack Identity: Keystone API Proposal Jason, Sounds like the

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-06-15 Thread Rouault, Jason (Cloud Services)
check with an authorization subsystem whether the incoming request is allowed based on the who is making the request and the 3-tuple mentioned previously. Jason From: andi abes [mailto:andi.a...@gmail.com] Sent: Wednesday, June 15, 2011 9:18 AM To: Rouault, Jason (Cloud Services) Cc

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-06-15 Thread Rouault, Jason (Cloud Services)
Is there a plan to also have Keystone be the centralizing framework around authorization? Right now it looks like policy enforcement is left to the API layer. Thanks, Jason From: openstack-bounces+jason.rouault=hp@lists.launchpad.net [mailto:openstack-bounces+jason.rouault=hp

[Openstack] Stable and Development Trunks

2011-02-10 Thread Jason Cannavale
t it would make sense to have a set of known working packages, packaged at each release point, in the stable trunk and having the source to build from in the development trunk. Thoughts? Jason ___ Mailing list: https://launchpad.net/~opensta